DoS против Cisco Catalyst

Последовательность неудачных попыток авторизации приводит к утечке памяти в устройстве...

MS Windows IIS Unicode Remote Transversal Bug (3)

Exploit for unknown platform in category remote exploits ================================================= MS Windows IIS Unicode Remote Transversal Bug 3 ================================================= !/usr/bin/perl IIS 4.0/5.0 Unicode Exploit Checks for each script that has been posted on th...

Cat Soft Serv-U FTP Server 2.5.x - Brute Force

source: https://www.securityfocus.com/bid/1860/info FTP Serv-U is an internet FTP server from CatSoft. FTP Serv-U contains an anti brute-force security feature which does not indicate whether an account is valid or not, after three unsuccessful login attempts a user is disconnected. Reconnection ...

re, suidperl; more

hi, yes, i hoped to announce this bug to the perl-developers before it came public; but i think they read BQ ... Michal ... : So far, there are more security-releated apps which use /bin/mail for logging Once I was also fallen into thinking that it can be secure, until Dave Dittrich pointed that ...

CVE-1999-0582

A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc...

checkpoint-fw1.vuln.txt

There are two vulnerabilities in FW-1. The first is an authentication issue, the other is a configuration issue. Since I don't have a copy of 4.x FW-1 handy maybe someone can check it for me. 1 The basic authentication used in Checkpoint FW-1 used for inside/outbound and outside/inbound allows...

PT-1999-1646 · Dec · Openvms

Name of the Vulnerable Software and Affected Versions: Open VMS versions 5.3 through 5.5-2 Description: The issue allows attackers to conduct brute force password guessing due to improper disabling of access to user accounts that exceed the break-in limit threshold for failed login attempts. This...

CVE-2000-0118

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing...

RedHat Linux 5.1 / Caldera OpenLinux Standard 1.2 - Mountd

// source: https://www.securityfocus.com/bid/121/info NFS servers running certain implementations of mountd, primarily Linux systems. On some systems, the vulnerable NFS server is enabled by default. This vulnerability can be exploited even if the NFS server does not share any file systems. This...

CVE-1999-1152

Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack...

PT-1998-1157 · Compaq/Microcom · Compaq/Microcom 6000 Access Integrator

Name of the Vulnerable Software and Affected Versions: Compaq/Microcom 6000 Access Integrator affected versions not specified Description: The issue allows remote attackers to guess usernames or passwords via a brute force attack because the system does not disconnect a client after a certain...

CVE-1999-0582

A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc...

PT-1997-1163 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT account policy with inappropriate security settings, specifically regarding lockout policies such as lockout duration and the number of bad logon attempts...

Threat Management Gateway Definition Updates for Network Inspection System

Forefront TMG Network Inspection System NIS helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols. As a security best practice, NIS signatures should be kept up to date...